Network Consultant - Prisma SD-WAN/SASE

Overview

We are seeking an experienced Network Consultant to lead and support the transformation of our client's legacy MPLS network into a modern, agile, and secure hybrid Internet-based/private underlay powered by Palo Alto Networks SD-WAN and SASE technologies. This role is critical to ensuring seamless migration, optimal performance, and robust security across their global network infrastructure.

The successful candidate must be certified in either Palo Alto Networks Certified SD-WAN Engineer and/or Palo Alto Networks System Engineer (PSE): SASE Professional. This is an initial 3 month contract with a very likely extension. Hybrid - with 2 days a week onsite in London City office.

Key Responsibilities

• Assessment & Planning
• Evaluate the current MPLS architecture and identify transformation opportunities.
• Design a scalable internet-based underlay network aligned with business and technical requirements.
• Develop migration strategies and phased rollout plans for SD-WAN and SASE deployment.
• Implementation & Integration
• Configure and deploy Palo Alto Prisma SD-WAN edge devices and cloud controllers.
• Integrate SASE components including secure web gateway (SWG), cloud access security broker (CASB), ZTNA, and firewall-as-a-service.
• Ensure interoperability with existing infrastructure, including firewalls, routers, and cloud services.
• Security & Performance Optimization
• Apply best practices for secure internet breakout, segmentation, and traffic steering.
• Monitor and optimize network performance using Palo Alto's analytics and visibility tools.
• Implement policy-based routing and application-aware traffic management.
• Collaboration & Documentation
• Work closely with internal IT teams, vendors, and stakeholders to ensure alignment and smooth execution.
• Provide detailed documentation of network designs, configurations, and operational procedures.
• Train internal staff on new technologies and operational workflows.

Qualifications & Skills

• Proven experience in network transformation projects, especially MPLS to SD-WAN migrations.
• Deep understanding of Palo Alto Networks Prisma SD-WAN and SASE architecture.
• Must be certified in at least one of Palo Alto Networks Certified SD-WAN Engineer and/or Palo Alto Networks System Engineer (PSE): SASE Professional
• Strong knowledge of IP routing, BGP, VPNs, QoS, and cloud networking.
• Familiarity with security frameworks and zero trust principles.
• Excellent troubleshooting, communication, and project management skills.